NetFilter/IPtables, which is the default built-in Linux firewall is able to do so.

You should try a rule like:
#iptables -A INPUT -m state --state NEW -p tcp -s your-target-ip --tcp-flags RST -j DROP